virus problem

franklinz · May 6th, 2003, 01:00 PM

last night while browsing around sites, nav popped up and said that i had a virus and that it could do nothing about it. i clicked on the exit sign and 2 more notices popped up stating the same thing, after that i decided to run nav to find out where they were and what i could do to them.
i got all the updates for nav, and scanned for viri', but it showed up as no virus'!!??? what the heck? so i went and got moosoft "the cleaner" and ran a virus checker with the latest updates available, it shows as no virus'!!?? but it gives me this message:
"There were problems detecting durring scanning, do you wish to view the problem log?"
i click yes and this shows up in notepad:
"FILE: C:\pagefile.sys

PROBLEM: I could not scan this file. Error Code 32: "The process cannot access the file because it is being used by another process."

SOLUTION: A common reason for this error is that Windows has locked the file for
SOLUTION: exclusive access. A swap file is a common example. Also, an antivirus
SOLUTION: program might be denying access to the file. In that case, you can
SOLUTION: temporarily disable the anti-virus to clean the trojan.

i tried to dissable nav and run the cleaner again, but it gives me the same thing.
if any body can help id appreciate it.
thanks,
franklinz

tmx468 · May 6th, 2003, 01:05 PM

Could these possibly be 'dodgy' sites? MP3/Adult in nature?
If so, then you are likely to have come in contact with some scripts/viruses, which NAV will have stopped before they hit your system, so you will be clean.
Thank your lucky stars you have NAV!
Pagefile.sys is not always (in my experience) a scannable file - so I would not worry so much about that.

franklinz · May 6th, 2003, 04:02 PM

yeah they were quite "dodgy" lol, the wierd thing is it said that nav found a virus in my computer (c:/documents/settings or something like that) but when i ran the virus scans it reported nothing.
so am i in the clear, or what else should i do??
thanks for the response,
franklinz

tmx468 · May 7th, 2003, 09:20 AM

It would likely be... c:\docs and settings\username\local settings\temp internet\xxx.IAMAVIRUS
This is the area where your temp internet files are saved, so NAV picked it up as it was downloaded, and dealt with it.
You are therefore in the clear... just try to steer clear of such sites in future... or go to the 'better' ones!!

muno · May 7th, 2003, 09:29 AM

You can't scan pagefile.sys, it's the paging file of the system (where non-needed data from memory is transferred).

Kinda like swap file in w9x.
-M

esdxc37 · May 7th, 2003, 09:41 AM

get rid of nav and get the best virus program out there
AVG free from grisoft at
www.grisoft.com
fill in the forms correctly with your real details I have been with them over 2 years now and have yet to recieve any mail from them apart from the registration key

petriedn · May 7th, 2003, 09:51 AM

I don't know much abou Norton, but I think it has both "real time" and scheduled/on demand scanning. Maybe the real time, which is what reported the virus in the first place, uses heuristics to scan, while the scheduled/on demand doesn't. Heuristics catches more virii because it doesn't rely on a pre-defined database. However, it also reports more false positives. You might look in your settings to see if this is the case.

Of course, it is also possible that NAV deleted the virus when it detected it - I *think* this can happen even though it would tell you it can't disinfect?

Cheers,
David